InServiceNow,Access Control Rules (ACLs)determine whether auser can access a specific record, table, or field.
When evaluatingtable ACLs, ServiceNow follows aspecific-to-generalapproach:
First, it checks the most specific ACL (Table ACL)
Example: If the table isincident, ServiceNow first checks ACLs forincident.
Then, it checks the Parent Table ACL(if the table is inherited)
Example: Sinceincidentextendstask, it will check ACLs fortask.
Finally, it checks the Wildcard ACL (*ACL)
If no specific or parent table ACL is matched, ServiceNow checks for awildcard ACL(*.read,*.write, etc.).
Specific Table ACL(e.g.,incident.read)
Parent Table ACL(e.g.,task.read)
Wildcard ACL(e.g.,*.read)
Order of ACL Evaluation:Thisensures granular access control, giving priority tomore specific rules before applying broader permissions.
*A. Specific to general: Table.Field ACL, Parent Table.Field ACL, .Field ACLIncorrect– Field ACLs are evaluatedaftertable ACLs. This option confuses table and field evaluation.
B. Bottom to top: Table ACL, Table.Field ACL, Parent Table.Field ACLIncorrect– The correct order isTable ACL → Parent Table ACL → Wildcard ACL, not Table.Field ACL order.
C. General to specific: Table ACL, Table.Field ACL, Parent Table, Field ACLIncorrect– ServiceNow appliesspecific ACLs first, not general ones.
D. Top to bottom: Wildcard Table ACL, Parent Table ACL, Table ACLIncorrect– Wildcard ACLs are evaluatedlast, not first.
Incorrect Answer Choices Analysis:
ServiceNow Docs – Access Control Evaluation Order???? Access Control Rules
ServiceNow Community – ACL Best Practices???? Understanding ACL Processing
Official ServiceNow Documentation References:
